← Today's brief

Security · Updated 24 Oct, 11:55 am IST

CISA adds two actively exploited flaws in Collabora Online and Arista VeloCloud to KEV

Image: The Hacker News

Why it matters for readers: This shows real-world attacks target widely used infrastructure, so it's worth following patch updates.

  • CISA added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its KEV list.1
  • The agency cited reports of active exploitation in the wild for these vulnerabilities.1
  • One vulnerability is identified as CVE-2026-110447 and has a CVSS score of 9.2.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started